Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: zGJ81qtR7iNMJoe4zbHrLpzy5tQuzKNP+sqJUhFEZxs=
Subject key identifier: B1:6E:B1:31:39:39:6B:79:99:EF:FA:5C:FB:AD:D1:43:DB:37:AD:4A
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 019D38D3B524963C72BF4AF442F21CA7B887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: IwVPMK2fA8GLB+smGCXe3PluAax6bz55+QYOleZMELQ=)
2: eiZ3dRoJQOY5In2On20-nf-q73k.roa (hash: GE2likVbzstV6xbMDw5q0Xw8FdnZheeQhcKCOGkCp1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b5:24:96:3c:72:bf:4a:f4:42:f2:1c:a7:b8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=b16eb13139396b7999effa5cfbadd143db37ad4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:f0:5e:47:24:b7:78:ab:9b:f4:30:ef:e4:
c5:26:01:86:31:30:85:e9:19:04:23:25:09:b8:fd:
23:e4:1d:53:79:a6:9c:66:57:d8:b5:77:1b:91:38:
1c:b7:15:b8:2e:07:69:40:3c:5c:6c:4c:7b:a4:c2:
af:dd:11:7c:d9:9a:2c:75:4a:3d:9c:6c:97:70:22:
11:c4:d1:20:3a:51:68:6f:49:2a:b8:c5:3d:30:8c:
f8:bb:65:00:08:3e:78:30:07:2d:60:df:ef:0f:05:
d0:7a:64:59:f0:c5:fc:ba:cd:38:4b:ff:0b:4e:79:
a9:19:04:0f:e3:e4:0b:06:7b:e5:ab:d9:7e:51:73:
88:34:95:ab:8a:19:59:8d:9f:b8:59:c5:3a:90:7f:
f9:f6:15:37:75:70:dc:21:04:fd:ab:90:53:14:80:
73:37:8e:0b:d9:c3:e7:d6:d0:c3:21:7f:32:e6:d8:
d7:ab:8f:36:47:c6:72:49:e0:ea:88:7e:6b:5b:e4:
34:58:42:79:a5:6b:bb:77:a8:91:10:09:b8:cd:71:
d4:5f:aa:93:c9:25:37:35:57:ad:8e:cd:4c:4d:13:
5c:50:fe:2f:b3:e6:5c:44:b2:e4:a4:81:3c:bf:9d:
b7:8a:53:11:aa:ee:2d:5e:c4:d8:71:48:56:19:46:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6E:B1:31:39:39:6B:79:99:EF:FA:5C:FB:AD:D1:43:DB:37:AD:4A
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7f:18:4c:97:41:aa:db:f7:74:9b:96:b4:6c:a5:ff:ff:97:
fd:40:b3:60:b3:64:23:a7:d8:bc:59:54:be:b5:10:e4:e4:e6:
25:a8:d1:15:f9:fc:c2:42:19:d9:9d:b8:d6:f8:47:97:1f:f2:
12:20:53:a8:59:84:2f:8d:38:60:05:61:57:e5:77:1f:f9:7a:
92:6f:45:0e:15:99:13:4e:b7:d0:be:da:61:d0:d8:3b:52:88:
56:3f:d1:0e:0d:2c:a2:3b:c5:00:21:91:b6:1a:01:cd:77:d3:
7f:2e:9d:b1:23:04:f4:2a:57:c1:2b:73:d1:76:0e:ea:f5:49:
9a:8c:84:69:0b:ed:e2:9b:43:ff:f2:a3:69:22:7a:6c:43:5e:
1d:b0:3f:ed:7d:df:52:98:af:0b:19:a4:d6:84:7e:83:4b:4c:
ad:84:df:62:4a:25:bb:14:71:19:ec:b6:cc:ee:ef:3e:d9:38:
31:8c:db:70:fb:b7:e1:7c:74:0c:ef:db:1d:1d:3e:f4:8a:da:
55:9a:5a:4b:2a:dc:b5:20:83:14:c8:ac:31:ca:a8:63:69:20:
d4:01:b3:27:3a:5a:69:f3:82:6b:50:40:27:b4:39:c6:68:1b:
06:7f:b1:e6:c4:6d:82:c1:57:23:16:27:dc:e8:a1:e0:7a:e5:
50:32:06:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:24 2026 by rpki-client